Zenora · Version 2.4 · September 2026
This Privacy Policy describes how Zenora (the "Platform"), operated by Zenora Marketplace LLC ("we", "the Company"), collects, uses, shares and protects the personal information of people who use the Platform ("you", "the user").
This Policy applies to all information we collect through the Platform, in any country where we operate. It is drafted to comply with applicable privacy laws, including the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), in the United States, and the General Data Protection Regulation (GDPR) in the European Union.
By using the Platform, you accept the practices described in this Policy. If you do not agree, please do not use the Platform. This Policy forms an integral part of our Terms and Conditions.
Information you give us when you register: your name, your email address, your date of birth, your gender, your nationality, your city, your language and your interests. All of it is requested when you create the account and you can edit it from your account at any time. Your name and email are what we need to create and verify the account.
What each piece of data is for: your date of birth, to confirm you are 18 or older and for the age-range breakdowns in advertising reports; your gender and nationality, to target which advertising you see inside Zenora; your city and language, to show you items from your area, in your language, and also to target advertising; your interests, to let you know about nearby items that match what you care about. Interests are NOT used for advertising.
Information you generate by using the Platform: your listings (descriptions, photographs, prices), the offers you place, your GEMS balance and activity, and the messages you exchange with other users through the internal chat.
Technical information collected automatically: when you use the Platform —including as a non-registered visitor— we collect minimal technical data such as your IP address, browser and device type (user agent), and session identifiers. We use this data to operate the service, maintain security, prevent fraud, and measure the display of advertising content in aggregate (for example, to avoid counting the same impression twice).
Push notifications: if you enable them, we store a technical identifier for your device — the subscription generated by your browser, or the Firebase Cloud Messaging token if you use the app — together with the platform (Android or iPhone). We use them solely to send you alerts about offers, sales, messages and questions on your listings. The identifier is deleted when you sign out, when you uninstall the app, or when you delete your account, and you may revoke the permission at any time from your device or browser settings.
Camera and photos: the app requests access to your camera and photos only when you publish an item, so you can take the pictures or choose them from your gallery. We do not access your gallery at any other time, nor do we look at photos you have not selected. Keep in mind that the photos you upload to a listing are public: anyone who sees that listing sees them.
Location: it is only requested if you choose the “use my current location” option when publishing an item, and it serves to work out which city the item is in and to grant the City Pioneer bonus. We store the resulting CITY, not a history or a trail of your movements, and we never check your location in the background. You can publish without giving your location: just pick the city by hand.
In-app purchases: where they exist, they are processed by Google Play or Apple depending on the store you installed the app from. Zenora receives confirmation that the purchase took place and which pack was bought; we NEVER receive or store your card details. Purchases made on the web are processed by Stripe, on the same basis: Zenora neither sees nor stores your card.
What we do NOT collect: we do not use third-party analytics tools (such as Google Analytics) or advertising pixels (such as Meta or TikTok) on the Platform, neither on the web nor in the app. We do not sell or share your information with advertising intermediaries.
We do not deliberately collect categories of sensitive information (such as health data, ethnic origin, political opinions or biometric data), nor do we ask you to provide them. We ask that you do not include sensitive information in your listings or in the chat.
We use your information solely for legitimate purposes necessary to operate the Platform: to create and manage your account; verify your identity and prevent fraud; allow you to list, offer and complete transactions; facilitate coordination between buyer and seller through the chat; manage the GEMS system; send you transactional communications (listing results, closing notices, confirmations); and maintain the security and integrity of the Platform.
Advertising personalization (first-party): we select the advertising content you see using your age (calculated from your date of birth), your gender, your nationality, your city, your country and your language. The whole selection happens inside the Platform: no data that identifies you is sent to advertisers or to third-party advertising networks.
Legal basis (for users in the European Union, under the GDPR): we process your data on the basis of performance of the contract (providing the service you request), our legitimate interest (security, fraud prevention, service improvement), your consent (where applicable, for example for promotional communications) and compliance with legal obligations.
We do not use your personal information to make automated decisions producing significant legal effects about you without human involvement.
We NEVER sell, rent or commercialize your personal information to third parties. Your data is not a product and we do not monetize it.
We NEVER share your identifiable personal information with advertisers. Our business model is based on displaying advertising content, not on selling your data. The reports we deliver to advertisers contain aggregated metrics —impressions or views, completed views, clicks and click-through rate— and two breakdowns, gender and age range, expressed only as percentages.
Those breakdowns are omitted entirely if the campaign had fewer than 50 unique viewers, and any row representing fewer than 5 people is dropped in full. We never hand over individual counts or any data that could identify a person.
The information shared with third parties is exclusively functional: strictly what is necessary for the Platform to operate, as detailed in Section 5. There is no other exchange of your data.
Functional service providers: we share data with technology infrastructure providers strictly necessary to operate the Platform, such as hosting services, database, file storage and transactional email delivery. These providers act solely under our instructions, under agreements that prohibit them from using your information for any purpose other than providing their service to us, and are required to protect your data.
Other users: when you complete a transaction, we share with the other party only the information necessary to coordinate delivery (the seller's username and contact email with the winning buyer). We do not share any other personal data of yours.
Authorities and legal requirements: we may disclose information if required by law, in response to a valid request from a competent authority, or when necessary to protect the rights, safety or property of the Company, our users or third parties. In the event of a dispute between users, we may provide the chat and transaction records as documentary evidence.
There is no other way of sharing your data beyond those described in this section.
The Platform uses strictly necessary technical storage on your device (such as a session identifier) to keep you logged in and remember your basic preferences. This storage is essential for the service to function and does not require prior consent.
We currently do not use third-party advertising cookies or tracking technologies for behavioral marketing purposes.
If in the future we were to incorporate third-party analytics or advertising tools, we would update this Policy, inform you clearly, and, where required by law, request your consent and offer you the mechanisms to manage or refuse it.
Regardless of where you live, you may access your information, correct it, or request deletion of your account and associated data, subject to legal retention obligations. You can delete your account yourself from Settings inside the app, or from zenoramp.com/en/eliminar-cuenta (zenoramp.com/es/eliminar-cuenta in Spanish): the address carries the language in front.
What happens when you delete your account: we erase your personal data, your listings and your active offers are cancelled, and anyone who had made offers on your listings gets their GEMS back. The email address of a deleted account cannot be used to register again for 90 days; if that same address is deleted a second time, the period becomes 3 years.
If you reside in California (CCPA/CPRA), you have the right to: know what personal information we collect, use and share; request access to and deletion of that information; opt out of the sale or sharing of your personal information (we clarify that we do NOT sell or share your personal information for advertising purposes, so there is no sale to opt out of); and not to be discriminated against for exercising your rights.
If you reside in the European Union (GDPR), you have the right to: access your data; rectify it; request its erasure ("right to be forgotten"); restrict or object to its processing; request data portability; and withdraw your consent at any time where processing is based on it. You also have the right to lodge a complaint with the data protection supervisory authority in your country.
We do not discriminate against any user for exercising their privacy rights.
To exercise any of your rights, write to us at legal@zenoramp.com stating your request and the associated account. We will verify your identity before processing the request, to protect your information.
We will respond within the timeframes established by applicable law. Exercising your rights is free of charge, except for manifestly unfounded or excessive requests, as permitted by law.
Many actions you can perform directly from your account settings, such as editing your information or managing your communication preferences.
We apply reasonable technical and organizational measures to protect your personal information against unauthorized access, use, alteration or disclosure. Passwords are stored encrypted and communication with the Platform takes place over secure connections.
No system is completely foolproof. While we work to protect your information, we cannot guarantee absolute security. We recommend you use a strong, unique password and not share your credentials with anyone.
In the event of a security breach affecting your personal data, we will act in accordance with applicable law, including notification to authorities and affected users where appropriate.
We retain your personal information while your account is active and for as long as necessary to fulfill the purposes described in this Policy.
After your account is closed we delete your name, your email, your photo, your sessions and your devices. We keep, anonymized, the payments, the ratings and the messages that form part of other people's history: they are the record that lets us respond to a dispute and meet our legal obligations. Those records no longer identify you.
The Platform is intended exclusively for people over 18 years of age. We do not knowingly collect personal information from minors.
If we become aware that we have collected information from a minor under 18, we will delete that information promptly. If you believe a minor has provided us with information, contact us at legal@zenoramp.com.
The Company operates from the United States, and your information may be processed and stored in that country or in others where our functional service providers are located.
When we transfer personal data from the European Union or other jurisdictions with international transfer rules, we do so under mechanisms recognized by applicable law (such as Standard Contractual Clauses) to ensure an adequate level of protection of your information.
We may update this Privacy Policy to reflect changes in our practices or in applicable law. We will post the updated version on this page with its version date and, when changes are substantial, we will notify you through the Platform or via the registered contact methods.
Continued use of the Platform after the changes are posted constitutes acceptance of the updated Policy.
If you have questions, requests or complaints about this Policy or about the processing of your personal information, write to us at: legal@zenoramp.com
Data controller: Zenora Marketplace LLC, operator of Zenora.
Version 2.4 — September 22, 2026.